A Fake Ledger App stole over $9.5 million in cryptocurrency from more than 50 users within one week. The malicious app appeared on Apple’s Mac App Store, impersonating the official Ledger Live app to execute a large-scale crypto scam.
Blockchain investigator ZachXBT reported that the Fake Ledger App operated between April 7 and April 13, 2026. The phishing-based attack enabled instant wallet compromise, highlighting rising risks for crypto storage users.
Over $9.5 million in Cryptocurrency Lost
The Fake Ledger App targeted key cryptocurrencies such as Bitcoin, Solana, XRP, and USDT. ZachXBT reported that there is evidence showing that no fewer than three individuals lost over $1.95 million worth of cryptocurrency.
Also, during this theft, a single wallet had around $3.27 million in USDT removed. All of the stolen cryptocurrency was sent into over 150 KuCoin deposit accounts associated with money laundering activities.
Audia6, a centralized mixing service that charges high transaction costs for their services, was used to launder many of the stolen cryptocurrencies.
Also Read | Tether Launches tether.wallet Expanding Global Self Custody Financial Access
G. Love Was A Victim Of The Fake Ledger App Scam
G. Love, or Garrett Dutton, is one musician who suffered from using the Fake Ledger App. During the hack, he lost 5.92 Bitcoin, which translates to about $447,000.
Garrett Dutton said he installed what he thought was the genuine Ledger Live app when setting up his new computer. This example illustrates how even the most knowledgeable users may be able to fall prey to a well-designed crypto scam.
KuCoin Locks Suspect Account For Investigation
KuCoin issued an announcement stating they locked down a suspect account believed to be connected to the hacked funds. The crypto exchange added that other steps would depend upon receiving proper legal documentation and completing all relevant compliance measures.
As ZachXBT pointed out, illicit activity on exchanges continues to grow, and therefore so will regulatory oversight and potential prosecution risks. This is just another example of the AML and compliance issues that exist with cryptocurrency trading globally.
Cryptocurrency phishing attacks are becoming more frequent and sophisticated. Fake ledger-related phishing scams continue to be present throughout fake apps, e-mails, phone calls, and copied websites.
The Fake Ledger App demonstrates how fast cyber criminals are developing ways to take advantage of consumers through malware applications. In prior instances where authorities were able to recover stolen cryptocurrency, they were only able to do so partially. Complete recovery has been rare.
Why It Matters
Phishing attacks targeting crypto wallets are rapidly evolving, increasing financial risks for both new and experienced users.
Also Read | $12 Million Frozen as 20,000 Crypto Scam Victims Identified in Major Operation
